A modern JavaScript utility library delivering modularity, performance, & extras.
COMMITS
/ lodash.js February 23, 2026
J
docs(random): document lower > upper case (#6115)
Jon Church committed
February 6, 2026
U
docs: add security notice for `_.template` in threat model and API docs (#6099)
Ulises Gascón committed
January 21, 2026
J
doc: fix quotes in compact jsdoc (#6090)
Jon Church committed
J
Bump main to v4.17.23 (#6088)
John-David Dalton committed
December 18, 2025
J
fix: setCacheHas JSDoc return type should be boolean (#6071)
Jon Church committed
M
jsdoc: Add -0 and BigInt zeros to _.compact falsey values list (#6062)
Muhammad Mughees Raza committed
December 5, 2025
U
Prevent prototype pollution on baseUnset function
Ulises Gascón committed
October 27, 2025
U
Add CI pipeline for Node (#6022)
Ulises Gascón committed
February 20, 2021
B
Bump to v4.17.21
Benjamin Tan committed
January 26, 2021
M
Improve performance of `toNumber`, `trim` and `trimEnd` on large input strings
Michał Lipiński committed
February 17, 2021
C
Prevent command injection through `_.template`'s `variable` option
Christophe Coevoet committed
August 13, 2020
B
Bump to v4.17.20.
Benjamin Tan committed
B
Documentation fixes.
Benjamin Tan committed
July 8, 2020
M
Bump to v4.17.19
Mathias Bynens committed
M
Bump to v4.17.18
Mathias Bynens committed
M
Bump to v4.17.17
Mathias Bynens committed
M
Rebuild lodash and docs
Mathias Bynens committed
July 2, 2020
J
fix(zipObjectDeep): prototype pollution (#4759)
Jakub Mikulas committed
June 4, 2020
A
Sanitize sourceURL so it cannot affect evaled code (#4518)
Alex Brasetvik committed
October 16, 2019
C
Fix lodash.isEqual for circular references (#4320) (#4515)
Chinedum Ukejianya committed
October 13, 2019
A
Document matches* shorthands for over* methods (#4510) (#4514)
Artemy Tregubenko committed
October 10, 2019
M
Ensure `orderBy` will accept iteratee path arrays #4438 (#4513)
Michał Lipiński committed
October 4, 2019
G
(4.17) Short circuit sortedIndexBy methods for empty arrays (#4497)
Graeme Yeates committed
September 17, 2019
July 17, 2019
J
Rebuild lodash and docs.
John-David Dalton committed
July 10, 2019
J
Rebuild lodash and docs.
John-David Dalton committed
July 9, 2019
J
Rebuild lodash and docs.
John-David Dalton committed
J
Rebuild lodash and docs.
John-David Dalton committed
J
Update OpenJS references.
John-David Dalton committed
J
Fix minified build.
John-David Dalton committed
J
Format nit.
John-David Dalton committed
J
Use nativeIsFinite() instead of Number.isFinite().
John-David Dalton committed
J
Whitespace nit.
John-David Dalton committed
J
Revert "perf(toNumber): use +value to convert binary/octal/hexadecimal string (#4230)"
John-David Dalton committed
A
Prevent prototype pollution chaining to code execution via _.template (#4355)
Alex Brasetvik committed
June 24, 2019
K
fix: prototype pollution in _.defaultsDeep (#4336)
Kirill committed
May 9, 2019
E
Fixes issue with Object prototype and the chaining syntax. [closes #4247]
Erick Calder committed
April 18, 2019
J
Round Infinity with a precision argument returns Infinity (#4272)
Jeff Friesen committed
March 22, 2019
M
mergeWith: stack passed to customizer should always be defined (#4244)
Marc Hassan committed
March 14, 2019
February 12, 2019
L
cancel old timer (#4139)
liang feng committed
November 21, 2018
J
Revert "Ensure _.pick paths aren't interpolated twice. [closes #3952]"
John-David Dalton committed
September 18, 2018
J
Ensure _.pick paths aren't interpolated twice. [closes #3952]
John-David Dalton committed
J
Ensure map and set clones contain custom properties of source values. [closes #3951]
John-David Dalton committed
September 12, 2018
J
Rebuild lodash and docs.
John-David Dalton committed
August 31, 2018
J
Remove prototype property check in safeGet().
John-David Dalton committed
J
Ensure Object.prototype is not augmented by _.merge.
John-David Dalton committed
June 20, 2018
S
August 28, 2018
M
Prevent ReDoS
Manuel Jasso committed
April 24, 2018
J
Rebuild lodash and docs.
John-David Dalton committed